Re: Suhosin patch disabled by default in Debian php5 builds
| From: | Pierre Joye | Date: | Thu, 02 Feb 2012 17:41:53 +0000 |
| Subject: | Re: Suhosin patch disabled by default in Debian php5 builds | ||
| References: | 1 2 3 4 5 6 7 8 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-57626@lists.php.net to get a copy of this message | ||
hi Stefan,
You do not want that to happen, that's different than we, as a
project, not willing to see what could be done and help you or anyone
to get that done. The RFC process also makes that possible in a very
easy and open way.
On Thu, Feb 2, 2012 at 5:40 PM, Stefan Esser <stefan@nopiracy.de> wrote:
> Hello Pierre,
>
>> This is exactly where you should help php directly instead of doing
>> what you do now to defend your patch. In the long run (or maybe even
>> mid term), the Suhosin patch will disappear.
>
>
> I seriously doubt that. The PHP developers will never ever merge all features into the PHP
> core. And therefore Suhosin will continue to add additonal value.
> Especially since the next Suhosin-Patch for PHP 5.4.0 will already have new and more
> mitigations.
>
>
> Regards,
> Stefan
--
Pierre
@pierrejoye | http://blog.thepimp.net | http://www.libgd.org